Security Controls Engineer

Overview

Design and develop custom security controls based on threat modelling outputs. Detectives controls using Python-based frameworks. Extend and enhance existing security control frameworks. Develop and maintain automated unit tests and behavioral (BDD) test cases. Integrate controls into CI/CD pipelines for continuous validation. Collaborate with threat modelling teams and security SMEs.

• Design and develop custom security controls based on threat modelling outputs.
• Develop detective controls using Python-based frameworks.
• Extend and enhance existing security control frameworks.
• Develop and maintain automated unit tests and behavioral (BDD) test cases.
• Integrate controls into CI/CD pipelines for continuous validation.
• Collaborate with threat modelling teams and security SMEs.

• Minimum of 3-5 years of experience in Dev Sec Ops  engineering with a focus on cloud environments (AWS, GCP, Azure), ideally within a security program.
• Strong software engineering background with proficiency in software testing methodologies and tools.
• Advanced proficiency in Python and experience with Terraform for testing, automation, and custom tool development.
• Experience with API integrations and backend development; writing scalable, maintainable code.
• Hands-on experience with automated testing frameworks (Python).
• Experience with cloud-native development and architecture on AWS, GCP, and Azure.
• Experience with detection engineering, including detection-as-code practices and developing/maintaining detection rules.
• Hands-on experience with Open Policy Agent (OPA) for policy enforcement.
• Proficiency in Dev Ops tools and practices.
• Experience with SIEM query languages such as Splunk SPL and YARA rules.
• Must pass Karat Assessment (Python focused).
• Required security experience with strong coding proficiency.

• Location:
  
  Irving, TX (or eligible for relocation/remote options as applicable).